./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor481747424

<...>
[   92.242168][    T9] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts.
execve("./syz-executor481747424", ["./syz-executor481747424"], 0x7ffcfebbd780 /* 10 vars */) = 0
brk(NULL)                               = 0x555564cfd000
brk(0x555564cfdd00)                     = 0x555564cfdd00
arch_prctl(ARCH_SET_FS, 0x555564cfd380) = 0
set_tid_address(0x555564cfd650)         = 5848
set_robust_list(0x555564cfd660, 24)     = 0
rseq(0x555564cfdca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor481747424", 4096) = 27
getrandom("\xd1\xf0\xc6\x57\x12\x76\x86\x7e", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555564cfdd00
brk(0x555564d1ed00)                     = 0x555564d1ed00
brk(0x555564d1f000)                     = 0x555564d1f000
mprotect(0x7f8ff3160000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5849 attached
 <unfinished ...>
[pid  5849] set_robust_list(0x555564cfd660, 24 <unfinished ...>
[pid  5848] <... clone resumed>, child_tidptr=0x555564cfd650) = 5849
[pid  5849] <... set_robust_list resumed>) = 0
[pid  5849] mkdir("./syzkaller.WMAX4c", 0700 <unfinished ...>
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5849] <... mkdir resumed>)        = 0
./strace-static-x86_64: Process 5850 attached
[pid  5848] <... clone resumed>, child_tidptr=0x555564cfd650) = 5850
[pid  5850] set_robust_list(0x555564cfd660, 24 <unfinished ...>
[pid  5849] chmod("./syzkaller.WMAX4c", 0777 <unfinished ...>
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5850] <... set_robust_list resumed>) = 0
[pid  5849] <... chmod resumed>)        = 0
[pid  5850] mkdir("./syzkaller.BPeEES", 0700 <unfinished ...>
[pid  5849] chdir("./syzkaller.WMAX4c" <unfinished ...>
[pid  5850] <... mkdir resumed>)        = 0
[pid  5849] <... chdir resumed>)        = 0
./strace-static-x86_64: Process 5851 attached
[pid  5849] mkdir("./0", 0777 <unfinished ...>
[pid  5851] set_robust_list(0x555564cfd660, 24 <unfinished ...>
[pid  5850] chmod("./syzkaller.BPeEES", 0777 <unfinished ...>
[pid  5849] <... mkdir resumed>)        = 0
[pid  5848] <... clone resumed>, child_tidptr=0x555564cfd650) = 5851
[pid  5851] <... set_robust_list resumed>) = 0
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5851] mkdir("./syzkaller.VPxMUH", 0700 <unfinished ...>
[pid  5850] <... chmod resumed>)        = 0
[pid  5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5852 attached
 <unfinished ...>
[pid  5850] chdir("./syzkaller.BPeEES" <unfinished ...>
[pid  5848] <... clone resumed>, child_tidptr=0x555564cfd650) = 5852
[pid  5852] set_robust_list(0x555564cfd660, 24 <unfinished ...>
[pid  5851] <... mkdir resumed>)        = 0
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5852] <... set_robust_list resumed>) = 0
[pid  5850] <... chdir resumed>)        = 0
[pid  5852] mkdir("./syzkaller.9TRO3x", 0700 <unfinished ...>
[pid  5851] chmod("./syzkaller.VPxMUH", 0777 <unfinished ...>
[pid  5849] <... openat resumed>)       = 3
[pid  5850] mkdir("./0", 0777 <unfinished ...>
[pid  5849] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5853 attached
 <unfinished ...>
[pid  5851] <... chmod resumed>)        = 0
[pid  5849] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5853] set_robust_list(0x555564cfd660, 24 <unfinished ...>
[pid  5850] <... mkdir resumed>)        = 0
[pid  5849] close(3 <unfinished ...>
[pid  5848] <... clone resumed>, child_tidptr=0x555564cfd650) = 5853
[pid  5853] <... set_robust_list resumed>) = 0
[pid  5852] <... mkdir resumed>)        = 0
[pid  5851] chdir("./syzkaller.VPxMUH" <unfinished ...>
[pid  5850] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5853] mkdir("./syzkaller.AWfLb6", 0700 <unfinished ...>
[pid  5851] <... chdir resumed>)        = 0
[pid  5849] <... close resumed>)        = 0
[pid  5852] chmod("./syzkaller.9TRO3x", 0777 <unfinished ...>
[pid  5851] mkdir("./0", 0777 <unfinished ...>
[pid  5850] <... openat resumed>)       = 3
[pid  5852] <... chmod resumed>)        = 0
[pid  5851] <... mkdir resumed>)        = 0
[pid  5853] <... mkdir resumed>)        = 0
[pid  5852] chdir("./syzkaller.9TRO3x" <unfinished ...>
[pid  5850] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5852] <... chdir resumed>)        = 0
[pid  5850] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5852] mkdir("./0", 0777 <unfinished ...>
[pid  5850] close(3 <unfinished ...>
[pid  5852] <... mkdir resumed>)        = 0
[pid  5850] <... close resumed>)        = 0
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5851] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5854 attached
 <unfinished ...>
[pid  5851] <... openat resumed>)       = 3
./strace-static-x86_64: Process 5855 attached
[pid  5854] set_robust_list(0x555564cfd660, 24 <unfinished ...>
[pid  5853] chmod("./syzkaller.AWfLb6", 0777 <unfinished ...>
[pid  5852] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5849] <... clone resumed>, child_tidptr=0x555564cfd650) = 5854
[pid  5855] set_robust_list(0x555564cfd660, 24 <unfinished ...>
[pid  5854] <... set_robust_list resumed>) = 0
[pid  5853] <... chmod resumed>)        = 0
[pid  5852] <... openat resumed>)       = 3
[pid  5855] <... set_robust_list resumed>) = 0
[pid  5854] chdir("./0" <unfinished ...>
[pid  5851] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5855] chdir("./0" <unfinished ...>
[pid  5854] <... chdir resumed>)        = 0
[pid  5853] chdir("./syzkaller.AWfLb6" <unfinished ...>
[pid  5852] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5851] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5853] <... chdir resumed>)        = 0
[pid  5852] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5850] <... clone resumed>, child_tidptr=0x555564cfd650) = 5855
[pid  5853] mkdir("./0", 0777 <unfinished ...>
[pid  5851] close(3 <unfinished ...>
[pid  5852] close(3 <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5855] <... chdir resumed>)        = 0
[pid  5854] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5853] <... mkdir resumed>)        = 0
[pid  5852] <... close resumed>)        = 0
[pid  5855] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5854] <... prctl resumed>)        = 0
[pid  5855] <... prctl resumed>)        = 0
[pid  5855] setpgid(0, 0 <unfinished ...>
[pid  5854] setpgid(0, 0 <unfinished ...>
[pid  5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5857 attached
 <unfinished ...>
[pid  5853] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5857] set_robust_list(0x555564cfd660, 24 <unfinished ...>
[pid  5853] <... openat resumed>)       = 3
[pid  5857] <... set_robust_list resumed>) = 0
[pid  5857] chdir("./0")                = 0
[pid  5857] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5853] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5851] <... clone resumed>, child_tidptr=0x555564cfd650) = 5857
./strace-static-x86_64: Process 5856 attached
[pid  5857] <... prctl resumed>)        = 0
[pid  5855] <... setpgid resumed>)      = 0
[pid  5853] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5854] <... setpgid resumed>)      = 0
[pid  5857] setpgid(0, 0 <unfinished ...>
[pid  5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5853] close(3 <unfinished ...>
[pid  5852] <... clone resumed>, child_tidptr=0x555564cfd650) = 5856
[pid  5857] <... setpgid resumed>)      = 0
[pid  5856] set_robust_list(0x555564cfd660, 24 <unfinished ...>
[pid  5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5856] <... set_robust_list resumed>) = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5854] <... openat resumed>)       = 3
[pid  5856] chdir("./0" <unfinished ...>
[pid  5854] write(3, "1000", 4 <unfinished ...>
[pid  5857] <... openat resumed>)       = 3
[pid  5855] <... openat resumed>)       = 3
[pid  5854] <... write resumed>)        = 4
./strace-static-x86_64: Process 5858 attached
[pid  5854] close(3 <unfinished ...>
[pid  5856] <... chdir resumed>)        = 0
[pid  5857] write(3, "1000", 4 <unfinished ...>
[pid  5856] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5854] <... close resumed>)        = 0
[pid  5856] <... prctl resumed>)        = 0
[pid  5855] write(3, "1000", 4 <unfinished ...>
[pid  5854] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5858] set_robust_list(0x555564cfd660, 24 <unfinished ...>
[pid  5856] setpgid(0, 0 <unfinished ...>
[pid  5857] <... write resumed>)        = 4
[pid  5857] close(3)                    = 0
[pid  5857] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5858] <... set_robust_list resumed>) = 0
[pid  5857] <... symlink resumed>)      = 0
[pid  5856] <... setpgid resumed>)      = 0
[pid  5855] <... write resumed>)        = 4
[pid  5854] <... symlink resumed>)      = 0
[pid  5853] <... clone resumed>, child_tidptr=0x555564cfd650) = 5858
[pid  5858] chdir("./0" <unfinished ...>
[pid  5855] close(3 <unfinished ...>
[pid  5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5855] <... close resumed>)        = 0
[pid  5855] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5854] write(1, "executing program\n", 18executing program
executing program
 <unfinished ...>
[pid  5857] write(1, "executing program\n", 18) = 18
[pid  5858] <... chdir resumed>)        = 0
[pid  5855] <... symlink resumed>)      = 0
[pid  5854] <... write resumed>)        = 18
[pid  5856] <... openat resumed>)       = 3
[pid  5857] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5858] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5856] write(3, "1000", 4 <unfinished ...>
executing program
[pid  5855] write(1, "executing program\n", 18 <unfinished ...>
[pid  5854] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5858] <... prctl resumed>)        = 0
[pid  5857] <... memfd_create resumed>) = 3
[pid  5856] <... write resumed>)        = 4
[pid  5855] <... write resumed>)        = 18
[pid  5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5856] close(3 <unfinished ...>
[pid  5855] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5858] setpgid(0, 0 <unfinished ...>
[pid  5856] <... close resumed>)        = 0
[pid  5858] <... setpgid resumed>)      = 0
[pid  5856] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5857] <... mmap resumed>)         = 0x7f8feac00000
[pid  5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5856] <... symlink resumed>)      = 0
executing program
[pid  5858] <... openat resumed>)       = 3
[pid  5856] write(1, "executing program\n", 18) = 18
[pid  5856] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5858] write(3, "1000", 4 <unfinished ...>
[pid  5855] <... memfd_create resumed>) = 3
[pid  5854] <... memfd_create resumed>) = 3
[pid  5858] <... write resumed>)        = 4
[pid  5856] <... memfd_create resumed>) = 3
[pid  5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8feac00000
[pid  5858] close(3)                    = 0
[pid  5858] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5858] write(1, "executing program\n", 18 <unfinished ...>
[pid  5856] <... mmap resumed>)         = 0x7f8feac00000
[pid  5854] <... mmap resumed>)         = 0x7f8feac00000
executing program
[pid  5858] <... write resumed>)        = 18
[pid  5858] memfd_create("syzkaller", 0) = 3
[pid  5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8feac00000
[pid  5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5857] <... write resumed>)        = 16777216
[pid  5857] munmap(0x7f8feac00000, 138412032 <unfinished ...>
[pid  5856] <... write resumed>)        = 16777216
[pid  5856] munmap(0x7f8feac00000, 138412032 <unfinished ...>
[pid  5855] <... write resumed>)        = 16777216
[pid  5855] munmap(0x7f8feac00000, 138412032 <unfinished ...>
[pid  5857] <... munmap resumed>)       = 0
[pid  5857] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5854] <... write resumed>)        = 16777216
[pid  5857] <... openat resumed>)       = 4
[pid  5857] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5858] <... write resumed>)        = 16777216
[pid  5854] munmap(0x7f8feac00000, 138412032 <unfinished ...>
[pid  5858] munmap(0x7f8feac00000, 138412032 <unfinished ...>
[pid  5857] <... ioctl resumed>)        = 0
[pid  5857] close(3)                    = 0
[pid  5857] close(4)                    = 0
[pid  5857] mkdir("./file0", 0777)      = 0
[   98.634027][ T5857] loop2: detected capacity change from 0 to 32768
[pid  5857] mount("/dev/loop2", "./file0", "gfs2", 0, "suiddir,lockproto=lock_nolock,quota," <unfinished ...>
[pid  5855] <... munmap resumed>)       = 0
[pid  5855] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5855] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5855] close(3)                    = 0
[pid  5855] close(4)                    = 0
[pid  5855] mkdir("./file0", 0777 <unfinished ...>
[pid  5856] <... munmap resumed>)       = 0
[pid  5855] <... mkdir resumed>)        = 0
[   98.707593][ T5857] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   98.726183][ T5857] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   98.738415][ T5855] loop1: detected capacity change from 0 to 32768
[pid  5856] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5855] mount("/dev/loop1", "./file0", "gfs2", 0, "suiddir,lockproto=lock_nolock,quota," <unfinished ...>
[pid  5856] <... openat resumed>)       = 4
[pid  5856] ioctl(4, LOOP_SET_FD, 3)    = 0
[   98.782845][ T5855] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[   98.791266][ T5856] loop3: detected capacity change from 0 to 32768
[   98.802122][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor481 Not tainted 6.15.0-next-20250530-syzkaller #0 PREEMPT(full) 
[   98.802151][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   98.802162][ T5855] Call Trace:
[   98.802171][ T5855]  <TASK>
[   98.802179][ T5855]  dump_stack_lvl+0x189/0x250
[   98.802228][ T5855]  ? kernfs_path_from_node+0x2c/0x260
[   98.802273][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.802293][ T5855]  ? __pfx__printk+0x10/0x10
[   98.802317][ T5855]  ? kernfs_path_from_node+0x2c/0x260
[   98.802341][ T5855]  ? kernfs_path_from_node+0x2c/0x260
[   98.802367][ T5855]  ? kernfs_path_from_node+0x22c/0x260
[   98.802390][ T5855]  ? kernfs_path_from_node+0x2c/0x260
[   98.802418][ T5855]  sysfs_create_dir_ns+0x259/0x280
[pid  5858] <... munmap resumed>)       = 0
[pid  5856] close(3)                    = 0
[pid  5856] close(4)                    = 0
[pid  5858] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5856] mkdir("./file0", 0777 <unfinished ...>
[pid  5858] <... openat resumed>)       = 4
[pid  5856] <... mkdir resumed>)        = 0
[pid  5858] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5856] mount("/dev/loop3", "./file0", "gfs2", 0, "suiddir,lockproto=lock_nolock,quota," <unfinished ...>
[pid  5858] <... ioctl resumed>)        = 0
[   98.802445][ T5855]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   98.802474][ T5855]  ? do_raw_spin_unlock+0x122/0x240
[   98.802502][ T5855]  kobject_add_internal+0x59f/0xb40
[   98.802539][ T5855]  kobject_init_and_add+0x125/0x190
[   98.802566][ T5855]  ? __pfx_kobject_init_and_add+0x10/0x10
[   98.802588][ T5855]  ? __raw_spin_lock_init+0x45/0x100
[   98.802613][ T5855]  ? __init_swait_queue_head+0xa9/0x150
[   98.802642][ T5855]  gfs2_sys_fs_add+0x237/0x470
[   98.802664][ T5855]  ? __pfx_gfs2_sys_fs_add+0x10/0x10
[pid  5858] close(3)                    = 0
[pid  5858] close(4)                    = 0
[pid  5858] mkdir("./file0", 0777)      = 0
[   98.802692][ T5855]  ? is_dynamic_key+0xd6/0x1c0
[   98.802717][ T5855]  ? __pfx_alloc_workqueue+0x10/0x10
[   98.802757][ T5855]  gfs2_fill_super+0x1348/0x2010
[   98.802801][ T5855]  ? __pfx_gfs2_fill_super+0x10/0x10
[   98.802832][ T5855]  ? sb_set_blocksize+0x104/0x180
[   98.802863][ T5855]  ? setup_bdev_super+0x4c1/0x5b0
[   98.802888][ T5855]  get_tree_bdev_flags+0x40b/0x4d0
[   98.802909][ T5855]  ? __pfx_gfs2_fill_super+0x10/0x10
[   98.802934][ T5855]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   98.802957][ T5855]  ? rcu_is_watching+0x15/0xb0
[pid  5858] mount("/dev/loop4", "./file0", "gfs2", 0, "suiddir,lockproto=lock_nolock,quota," <unfinished ...>
[pid  5854] <... munmap resumed>)       = 0
[pid  5854] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[   98.802984][ T5855]  gfs2_get_tree+0x51/0x1e0
[   98.803012][ T5855]  vfs_get_tree+0x8f/0x2b0
[   98.803037][ T5855]  do_new_mount+0x24a/0xa40
[   98.803070][ T5855]  __se_sys_mount+0x317/0x410
[   98.803100][ T5855]  ? __pfx___se_sys_mount+0x10/0x10
[   98.803121][ T5855]  ? rcu_is_watching+0x15/0xb0
[   98.803142][ T5855]  ? __x64_sys_mount+0x20/0xc0
[   98.803163][ T5855]  do_syscall_64+0xfa/0x3b0
[   98.803176][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.803198][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.803213][ T5855]  ? clear_bhb_loop+0x60/0xb0
[   98.803232][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.803246][ T5855] RIP: 0033:0x7f8ff30b55da
[   98.803270][ T5855] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   98.803283][ T5855] RSP: 002b:00007ffee7d969c8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[   98.803302][ T5855] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ff30b55da
[   98.803313][ T5855] RDX: 0000200000037f40 RSI: 0000200000037f80 RDI: 00007ffee7d96a20
[   98.803323][ T5855] RBP: 0000000000000004 R08: 00007ffee7d96a60 R09: 0000000000037fa7
[   98.803333][ T5855] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000001000000
[   98.803343][ T5855] R13: 00007ffee7d96a60 R14: 0000200000037f80 R15: 0000000000000003
[   98.803368][ T5855]  </TASK>
[   98.804195][ T5855] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[   98.899192][ T5858] loop4: detected capacity change from 0 to 32768
[   98.902699][ T5855] gfs2: fsid=syz:syz: error -17 adding sysfs files
[   98.955709][ T5857] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   98.971705][ T5855] ==================================================================
[   99.042528][ T1220] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   99.046586][ T5855] BUG: KASAN: null-ptr-deref in gfs2_drop_inode+0x20c/0x3a0
[   99.174981][ T5855] Read of size 8 at addr 00000000000000a8 by task syz-executor481/5855
[   99.183234][ T5855] 
[   99.185596][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor481 Not tainted 6.15.0-next-20250530-syzkaller #0 PREEMPT(full) 
[   99.185615][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   99.185624][ T5855] Call Trace:
[   99.185634][ T5855]  <TASK>
[   99.185641][ T5855]  dump_stack_lvl+0x189/0x250
[   99.185662][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.185677][ T5855]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[   99.185701][ T5855]  ? gfs2_drop_inode+0x20c/0x3a0
[   99.185725][ T5855]  ? gfs2_drop_inode+0x20c/0x3a0
[   99.185746][ T5855]  kasan_report+0x118/0x150
[   99.185764][ T5855]  ? gfs2_drop_inode+0x20c/0x3a0
[   99.185789][ T5855]  kasan_check_range+0x2b0/0x2c0
[   99.185808][ T5855]  gfs2_drop_inode+0x20c/0x3a0
[   99.185831][ T5855]  iput+0x45d/0x9d0
[   99.185853][ T5855]  gfs2_fill_super+0x1418/0x2010
[   99.185878][ T5855]  ? __pfx_gfs2_fill_super+0x10/0x10
[   99.185899][ T5855]  ? sb_set_blocksize+0x104/0x180
[   99.185921][ T5855]  ? setup_bdev_super+0x4c1/0x5b0
[   99.185938][ T5855]  get_tree_bdev_flags+0x40b/0x4d0
[   99.185954][ T5855]  ? __pfx_gfs2_fill_super+0x10/0x10
[   99.185973][ T5855]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   99.185990][ T5855]  ? rcu_is_watching+0x15/0xb0
[   99.186006][ T5855]  gfs2_get_tree+0x51/0x1e0
[   99.186026][ T5855]  vfs_get_tree+0x8f/0x2b0
[   99.186043][ T5855]  do_new_mount+0x24a/0xa40
[   99.186063][ T5855]  __se_sys_mount+0x317/0x410
[   99.186084][ T5855]  ? __pfx___se_sys_mount+0x10/0x10
[   99.186101][ T5855]  ? rcu_is_watching+0x15/0xb0
[   99.186116][ T5855]  ? __x64_sys_mount+0x20/0xc0
[   99.186135][ T5855]  do_syscall_64+0xfa/0x3b0
[   99.186149][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.186170][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.186185][ T5855]  ? clear_bhb_loop+0x60/0xb0
[   99.186203][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.186218][ T5855] RIP: 0033:0x7f8ff30b55da
[   99.186233][ T5855] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   99.186247][ T5855] RSP: 002b:00007ffee7d969c8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[   99.186264][ T5855] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ff30b55da
[   99.186276][ T5855] RDX: 0000200000037f40 RSI: 0000200000037f80 RDI: 00007ffee7d96a20
[   99.186287][ T5855] RBP: 0000000000000004 R08: 00007ffee7d96a60 R09: 0000000000037fa7
[   99.186296][ T5855] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000001000000
[   99.186306][ T5855] R13: 00007ffee7d96a60 R14: 0000200000037f80 R15: 0000000000000003
[   99.186322][ T5855]  </TASK>
[   99.186328][ T5855] ==================================================================
[   99.448055][ T1220] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   99.448073][ T5855] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   99.462092][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor481 Not tainted 6.15.0-next-20250530-syzkaller #0 PREEMPT(full) 
[   99.473773][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   99.483963][ T5855] Call Trace:
[   99.487288][ T5855]  <TASK>
[   99.490255][ T5855]  dump_stack_lvl+0x99/0x250
[   99.494888][ T5855]  ? __asan_memcpy+0x40/0x70
[   99.499541][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.504878][ T5855]  ? __pfx__printk+0x10/0x10
[   99.509516][ T5855]  panic+0x2db/0x790
[   99.513473][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.518909][ T5855]  ? __pfx_panic+0x10/0x10
[   99.523387][ T5855]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   99.529326][ T5855]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   99.535377][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   99.541868][ T5855]  ? gfs2_drop_inode+0x20c/0x3a0
[   99.546880][ T5855]  check_panic_on_warn+0x89/0xb0
[   99.551871][ T5855]  ? gfs2_drop_inode+0x20c/0x3a0
[   99.556948][ T5855]  end_report+0x78/0x160
[   99.561228][ T5855]  kasan_report+0x129/0x150
[   99.566840][ T5855]  ? gfs2_drop_inode+0x20c/0x3a0
[   99.571843][ T5855]  kasan_check_range+0x2b0/0x2c0
[   99.577029][ T5855]  gfs2_drop_inode+0x20c/0x3a0
[   99.581852][ T5855]  iput+0x45d/0x9d0
[   99.585797][ T5855]  gfs2_fill_super+0x1418/0x2010
[   99.590799][ T5855]  ? __pfx_gfs2_fill_super+0x10/0x10
[   99.596127][ T5855]  ? sb_set_blocksize+0x104/0x180
[   99.601215][ T5855]  ? setup_bdev_super+0x4c1/0x5b0
[   99.606352][ T5855]  get_tree_bdev_flags+0x40b/0x4d0
[   99.611609][ T5855]  ? __pfx_gfs2_fill_super+0x10/0x10
[   99.616972][ T5855]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   99.622833][ T5855]  ? rcu_is_watching+0x15/0xb0
[   99.627655][ T5855]  gfs2_get_tree+0x51/0x1e0
[   99.632371][ T5855]  vfs_get_tree+0x8f/0x2b0
[   99.636898][ T5855]  do_new_mount+0x24a/0xa40
[   99.641416][ T5855]  __se_sys_mount+0x317/0x410
[   99.646203][ T5855]  ? __pfx___se_sys_mount+0x10/0x10
[   99.651508][ T5855]  ? rcu_is_watching+0x15/0xb0
[   99.656580][ T5855]  ? __x64_sys_mount+0x20/0xc0
[   99.661641][ T5855]  do_syscall_64+0xfa/0x3b0
[   99.666376][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.671681][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.677931][ T5855]  ? clear_bhb_loop+0x60/0xb0
[   99.682620][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.688628][ T5855] RIP: 0033:0x7f8ff30b55da
[   99.693228][ T5855] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   99.712888][ T5855] RSP: 002b:00007ffee7d969c8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[   99.721426][ T5855] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ff30b55da
[   99.729431][ T5855] RDX: 0000200000037f40 RSI: 0000200000037f80 RDI: 00007ffee7d96a20
[   99.737508][ T5855] RBP: 0000000000000004 R08: 00007ffee7d96a60 R09: 0000000000037fa7
[   99.745498][ T5855] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000001000000
[   99.753708][ T5855] R13: 00007ffee7d96a60 R14: 0000200000037f80 R15: 0000000000000003
[   99.761693][ T5855]  </TASK>
[   99.765410][ T5855] Kernel Offset: disabled
[   99.770009][ T5855] Rebooting in 86400 seconds..